How to use send query instead of elastic to logstash?

Elastic Stack Logstash
1

Hi
How can send my query instead of elastic to logstash?
i want to use logstash to get my query from elastic.
how can i use it?

2

Logstash does not act as a proxy for queries to Elasticsearch. Why would you want to do this?

3

i want to handle my queries.
i want to know what user? from ip? what query? request.
there is no way to use logstash as pipeline?

4

Sounds like you want to set up a proxy in front of Elasticsearch to log this kind of information. This logged data can the be read and processed by Filebeat and/or Logstash. You may also be able to collect this type of information using Packetbeat.

5

So - you say offer me i use Packetbeat to log my queries?
and logstash just as a pipeline send data from every one to elastic or elastic data to a specific target?

6

That might be an option worth exploring. Packetbeat can write directly to Elasticsearch as well, so whether you need Logstash or not depends on what you want to do with the data.

7

Sorry im confusing.
Packetbeat log data and write in elasticsearch?
what is Packetbeat exactly doing?

8

Packetbeat can listen to and record HTTP traffic. It may be able to do what you are looking for. If it is not, I suspect some kind of custom proxy that records the information you are looking for is probably the way to go.

9

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.